Evgenii Logvinov evgeniy-logvinov

Про токены, JSON Web Tokens (JWT), аутентификацию и авторизацию. Token-Based Authentication

Last major update: 25.08.2020


	[
	{
	"region": "Москва и Московская обл.",
	"city": "Москва"
	},
	{
	"region": "Москва и Московская обл.",
	"city": "Абрамцево"
	},

	router.delete('/sessions/delete-all', authenticate(),
	async (req, res, next) => {
	try {
	const refreshToken = getRefreshToken(req);
	const user = await userService.deleteAllSessions({ token: req.token, refreshToken });
	res.status(200).send(user);
	} catch (e) {
	next(e);
	}
	});

	router.delete('/sessions/delete/:id', authenticate(),
	async (req, res, next) => {
	try {
	const id = req.params.id;
	const result = await userService.deleteByIdSession({ id, token: req.token });
	res.status(200).send(result);
	} catch (e) {
	next(e);
	}
	});

	router.get('/sessions', authenticate(),
	async (req, res, next) => {
	try {
	const user = await userService.getSessions({ token: req.token });
	res.status(200).send(user);
	} catch (e) {
	next(e);
	}
	});

	router.get('/user', authenticate(),
	async (req, res, next) => {
	try {
	const user = await userService.getUser({ token: req.token });
	res.status(200).send(user);
	} catch (e) {
	next(e);
	}
	});

	const express = require('express');
	const { securityService } = requireRoot('lib/services');
	const { getRefreshToken, getClientInfo } = requireRoot('lib/utility');

	const router = express.Router();

	router.post('/signup', async (req, res, next) => {
	try {
	const { email, password, confirmPassword, emailPreferences, phone, name } = req.body;
	const result = await securityService.signup({ email, password, confirmPassword, emailPreferences, phone, name });

	router.post('/refresh', async (req, res, next) => {
	try {
	const refreshToken = getRefreshToken(req);
	const newRefreshToken = await securityService.refresh({ refreshToken }, getClientInfo(req));
	res.send(newRefreshToken);
	} catch (e) {
	next(e);
	}
	});

	router.get('/token', async (req, res, next) => {
	try {
	const refreshToken = getRefreshToken(req);
	const token = await securityService.token({ refreshToken });
	res.send(token);
	} catch (e) {
	next(e);
	}
	});

	router.post('/signout', async (req, res, next) => {
	try {
	const refreshToken = getRefreshToken(req);
	const signout = await securityService.signout({ refreshToken });
	res.send(signout);
	} catch (e) {
	next(e);
	}
	});